Chapter 14: Network Security
TRUE/FALSE
1. An effective security policy implements multiple layers of security.
2. After virus prevention software has been installed, it must be updated regularly to ensure your network
is protected against all the latest malware threats.
3. The virus prevention industry is a proactive industry.
4. A single-homed bastion has two network interface cards and is assigned two IP addresses.
5. All devices in a RADIUS authentication stream have to be Cisco devices.
MULTIPLE CHOICE
1. A computer program that can infect a computer without the knowledge or permission of the user is
a(n)____.
a.
Worm
c.
Logic bomb
b.
Macro Virus
d.
Virus
2. When a user opens an infected application file or document, a(n) ____ attaches itself to the application
and infects other files accessed by the same application.
a.
macro virus
c.
Trojan
b.
worm
d.
logic bomb
3. A ____ virus is so named because it attempts to hide itself from detection.
a.
logic bomb
c.
stealth
b.
polymorphic
d.
boot-sector
4. A ____ virus is a virus that infects a computer’s master boot record.
a.
stealth
c.
polymorphic
b.
boot-sector
d.
logic bomb
5. A ____ is a piece of code inserted into a program that will perform specific malicious functions when
specified conditions are met.
a.
logic bomb
c.
macro virus
b.
Trojan Horse
d.
worm
6. The ____ is the least protective of the four firewall topologies.
a.
dual-homed bastion
c.
single-homed bastion
b.
packet-filtering router
d.
demilitarized zone
7. The ____ firewall topology consists of a packet filtering router that forwards all incoming packets to
the firewall software on a bastion host.
a.
packet-filtering router
c.
single-homed bastion
b.
demilitarized zone
d.
dual-homed bastion
8. A ____ topology works like a single-homed bastion topology, except that it has two network adapter
cards in it and two IP addresses, one for each network it is connected to.
a.
demilitarized zone
c.
packet-filtering router
b.
single-router zone
d.
dual-homed bastion
9. The ____ is the most secure firewall solution.
a.
dual-homed bastion
c.
packet-filtering router
b.
DMZ
d.
single-homed bastion
10. ____ is a means of encrypting a session between two hosts through the use of digital certificates,
which are based on asymmetric key encryption.
a.
CHAP
c.
DMZ
b.
RADIUS
d.
SSL
11. ____ is an industry-standard protocol that simply provides authentication service.
a.
TACACS+
c.
RADIUS
b.
SSL
d.
TLS
12. The ____ protocol is governed by RFC 2865 and can be used with cross-platform integration.
a.
RADIUS
c.
SSL
b.
TACACS+
d.
CHAP
13. The Cisco ____ service will examine your router and recommend which services should be disabled.
a.
CHAP
c.
SSH
b.
RADIUS
d.
SDM
14. ____ is a patch management software package.
a.
Symantec’s Altiris
c.
Cisco’s SWC
b.
Microsoft’s CLI
d.
Cisco’s SDM
15. ____ are a popular technology for creating a connection between an external computer and a corporate
site over the Internet.
a.
Firewalls
c.
VPNs
b.
DMZs
d.
Packet-filtering routers
16. A ____ VPN allows designated users to have access to the corporate network from remote locations.
a.
site-to-site
c.
user-to-user
b.
client-to-site
d.
user-to-server
17. A client-to-site VPN is also known as a ____ VPN.
a.
remote user
c.
site-to-site
b.
client-to-server
d.
client-to-client
18. A ____ VPN allows multiple corporate sites to be connected over low-cost Internet connections.
a.
server-to-client
c.
client-to-site
b.
site-to-site
d.
site-to-client
19. ____ is a tunneling protocol that was developed by Microsoft and was extremely popular at one time
for remote users who had to dial in to the corporate network on a secure channel.
a.
GRE
c.
PPTP
b.
L2TP
d.
IPSec
20. ____ is a suite of protocols, accepted as an industry standard, which provides secure data transmission
over layer 3 of the OSI model.
a.
L2TP
c.
GRE
b.
PPTP
d.
IPSec
21. A(n) ____ is a configuration value (or simply stated, a command) that allows you to establish an
IPSEC VPN on a Cisco firewall.
a.
IKE set
c.
AH script
b.
transform set
d.
SDM set
COMPLETION
1. ____________________ refers to malicious programs that have many different capabilities. Some
might do something relatively harmless, such as opening files on a CD-ROM; others might be
extremely destructive, perhaps destroying all of the data on a computer.
2. A(n) ____________________ is a server running a single application, such as a proxy server or
specialized firewall software.
3. A(n) ___________________________________ is like an IDS, except that it is placed in line so all
packets coming in or going out of the network pass through it.
4. In network security, a(n) ____________________ is an official approval that allows a user to access a
specific network resource.
5. ____________________ is the process by which users verify to a server that they are who they say
they are.
MATCHING
Match each item with a statement below:
a.
Security policy
f.
Firewall
b.
Physical security
g.
IDS
c.
Worm
h.
Symmetric key encryption
d.
Polymorphic virus
i.
Asymmetric key encryption
e.
Trojan Horse
1. these viruses change their appearance each time they replicate or infect
2. an organization’s set of rules regarding how to handle and protect sensitive data
3. a single-key encryption method
4. uses a mathematically matched key pair
5. the first level of security in any network
6. a security device that can detect a hacker’s attempts to gain access to the network
7. type of malware that appears to perform a desired function but in fact performs malicious functions
8. the primary method of keeping hackers out of a network
9. once it is activated it can replicate itself throughout the network by taking advantage of services on
computers in the network
SHORT ANSWER
1. What are some of the items that a security policy should include?
2. What are the goals of a security policy?
3. Briefly explain how to protect an organization’s hardware.
4. Why is user training paramount in protecting against viruses?
5. Briefly explain encryption at the network level.
6. What are some unnecessary services on most networks?
7. Why is it important to have a patch management program?
8. Briefly describe a Virtual Private Network (VPN)?
9. Briefly describe a client-to-site VPN.
10. Describe the two IPSec protocols that have been developed to provide packet-level security.